From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from out1-smtp.messagingengine.com ([66.111.4.25]:53597 "EHLO out1-smtp.messagingengine.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727613AbeHPTUJ (ORCPT ); Thu, 16 Aug 2018 15:20:09 -0400 Date: Thu, 16 Aug 2018 18:20:38 +0200 From: Greg KH To: Michal Kubecek Cc: maowenan , dwmw2@infradead.org, netdev@vger.kernel.org, eric.dumazet@gmail.com, edumazet@google.com, davem@davemloft.net, ycheng@google.com, jdw@amazon.de, stable@vger.kernel.org, Takashi Iwai Subject: Re: [PATCH stable 4.4 0/9] fix SegmentSmack in stable branch (CVE-2018-5390) Message-ID: <20180816162038.GA13451@kroah.com> References: <20180816072349.2ldy75jia3ubqg3u@unicorn.suse.cz> <827465d9-4116-68a8-c699-d5b2aedce69f@huawei.com> <20180816074457.bjxbrthhvfazuzmd@unicorn.suse.cz> <20180816113903.2stwrlm6frgmk2vs@unicorn.suse.cz> <20180816123356.47iq3bts427cpptx@unicorn.suse.cz> <20180816152409.GK10648@kroah.com> <20180816160616.u3refk4mqpyqagzi@unicorn.suse.cz> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20180816160616.u3refk4mqpyqagzi@unicorn.suse.cz> Sender: stable-owner@vger.kernel.org List-ID: On Thu, Aug 16, 2018 at 06:06:16PM +0200, Michal Kubecek wrote: > > If not, we can go from there and evaluate this much larger patch > > series. But let's try the simple thing first. > > At high packet rates (say 30K pkt/s and more), we can still saturate the > CPU. This is also mentioned in the announcement with claim that switch > to rbtree based queue would be necessary to fully address that. My tests > seem to confirm that but I'm still not sure it is worth backporting > something as intrusive into stable 4.4. No, it is not. If you worry about those things, you should not be running a 4.4 kernel, use 4.14 or newer please. thanks, greg k-h